$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa File: d5daf9f5-1db5-37fb-be60-626d8a02b645.roa (raw, json) Hash identifier: I/BCj20Zeaox4mE7xAyNL1Kknpd5Tj3EdieWvQrtlg4= Subject key identifier: E4:6B:D3:A6:A4:2B:26:32:AC:7F:A7:2E:51:03:6C:90:76:6D:32:28 Certificate issuer: /CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Certificate serial: 010D0C9F432858497974435CC5C164E6E7632A80 Authority key identifier: BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 395660 IP address blocks: 2620:133:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:43:5c:c5:c1:64:e6:e7:63:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d169cca5-b6c2-41f4-a92f-e74d5713d2c1 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=80af966d-0e15-4bd1-af0d-6a719d9c90fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:d2:86:b0:46:c4:e2:17:1a:e1:e5:21:cd: de:98:b1:65:2a:0c:f3:71:fd:5b:41:eb:fc:a4:b0: 50:a0:7d:60:a0:3b:56:f9:fb:93:cc:b0:73:e0:bc: d9:e9:eb:03:09:9e:fe:76:e3:20:1c:a6:48:8c:95: 86:97:31:0e:c3:c6:f3:65:11:06:20:79:9b:5c:54: 5d:8e:69:49:45:c9:af:d9:b4:72:b6:e6:49:eb:19: 9d:d2:8d:4d:94:17:2c:70:d3:0f:32:23:16:95:7f: 15:fb:b3:77:9c:52:68:a5:5c:b2:57:03:ed:05:79: 6e:cc:2e:dd:d1:81:3e:92:9b:c9:29:5f:70:f1:22: 5f:57:18:7b:48:88:82:93:42:12:8f:2c:62:e0:0a: e8:8b:e5:21:51:7e:16:6e:6e:7a:e5:61:52:bb:ce: b5:68:42:a5:b5:af:0e:0d:56:31:3b:0d:cd:db:d3: dc:16:c4:3c:b5:39:0e:cb:ae:90:07:8b:e1:cd:b5: fc:b8:ea:f3:1f:05:79:91:14:df:d5:e3:42:8c:a8: 94:cf:89:da:55:a7:5c:4a:4e:00:de:80:8f:75:b8: 45:fe:d3:a1:37:a3:a2:c0:d9:44:3b:58:8c:8d:e0: 2d:c9:82:ae:9a:84:bb:d2:50:c1:21:80:c0:f3:aa: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:D3:A6:A4:2B:26:32:AC:7F:A7:2E:51:03:6C:90:76:6D:32:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d5daf9f5-1db5-37fb-be60-626d8a02b645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.crl X509v3 Authority Key Identifier: keyid:BD:39:CD:79:F4:8B:24:EF:8F:69:8D:DC:3F:98:CD:0C:AB:81:F8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d169cca5-b6c2-41f4-a92f-e74d5713d2c1.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:de:d1:f8:7a:c2:1a:3c:43:58:b3:2b:38:d9:32:41:9e:72: c7:e6:ac:fd:7b:8a:80:cd:35:f9:20:c3:6b:7b:fd:4b:59:ea: 1c:b1:32:4f:ea:30:15:7c:ad:8e:10:33:34:8b:d7:fc:74:d0: fa:f2:df:b8:e6:e5:27:af:07:2c:24:42:25:70:13:9b:ef:b1: 11:4c:0c:bb:34:e2:2a:b1:12:56:c6:ea:9a:1a:43:e9:0d:70: 2d:c7:9e:9e:ba:3b:41:8a:69:a8:2f:de:a5:c7:29:49:7e:ec: 81:6a:e4:4b:99:6b:f9:e4:85:79:df:0e:2c:94:a6:c1:46:35: 39:80:db:d8:5d:a6:eb:02:13:2a:76:11:a7:1a:4c:58:6e:40: cd:48:73:41:35:8d:63:69:01:6a:8a:e0:8a:a7:4d:dd:7e:95: 84:02:c5:e6:0c:e2:7d:35:79:33:23:ef:1a:9c:a0:e9:8b:a8: f1:78:4c:40:12:ca:42:37:e0:03:30:df:1e:2c:a6:09:dd:36: 32:63:01:56:bd:e6:1a:12:f5:90:85:9b:01:c5:80:15:4f:67: b1:25:8b:5e:3d:ee:30:9c:cd:96:d3:4e:35:6d:43:37:1b:4f: 07:07:9b:0a:1d:b8:e7:0d:90:51:3e:34:dc:85:4a:4c:de:d8: 50:4d:c9:48 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl5dENcxcFk5udjKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE2OWNjYTUtYjZjMi00MWY0LWE5MmYtZTc0ZDU3MTNk MmMxMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ODBhZjk2NmQtMGUxNS00YmQxLWFmMGQtNmE3MTlkOWM5MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9LShrBGxOIXGuHlIc3emLFlKgzzcf1bQev8 pLBQoH1goDtW+fuTzLBz4LzZ6esDCZ7+duMgHKZIjJWGlzEOw8bzZREGIHmbXFRd jmlJRcmv2bRytuZJ6xmd0o1NlBcscNMPMiMWlX8V+7N3nFJopVyyVwPtBXluzC7d 0YE+kpvJKV9w8SJfVxh7SIiCk0ISjyxi4Aroi+UhUX4Wbm565WFSu861aEKlta8O DVYxOw3N29PcFsQ8tTkOy66QB4vhzbX8uOrzHwV5kRTf1eNCjKiUz4naVadcSk4A 3oCPdbhF/tOhN6OiwNlEO1iMjeAtyYKumoS70lDBIYDA86pK6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFORr06akKyYyrH+nLlEDbJB2bTIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5 Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRkNTcxM2QyYzEvZDVkYWY5ZjUtMWRiNS0z N2ZiLWJlNjAtNjI2ZDhhMDJiNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDE2OWNjYTUtYjZjMi00MWY0LWE5 MmYtZTc0ZDU3MTNkMmMxL2QxNjljY2E1LWI2YzItNDFmNC1hOTJmLWU3NGQ1NzEz ZDJjMS5jcmwwHwYDVR0jBBgwFoAUvTnNefSLJO+PaY3cP5jNDKuB+JowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMTY5Y2NhNS1iNmMyLTQxZjQtYTkyZi1lNzRk NTcxM2QyYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABM7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACN7R+HrCGjxDWLMrONkyQZ5yx+as/XuKgM01+SDDa3v9S1nqHLEy T+owFXytjhAzNIvX/HTQ+vLfuOblJ68HLCRCJXATm++xEUwMuzTiKrESVsbqmhpD 6Q1wLceenro7QYppqC/epccpSX7sgWrkS5lr+eSFed8OLJSmwUY1OYDb2F2m6wIT KnYRpxpMWG5AzUhzQTWNY2kBaorgiqdN3X6VhALF5gzifTV5MyPvGpyg6Yuo8XhM QBLKQjfgAzDfHiymCd02MmMBVr3mGhL1kIWbAcWAFU9nsSWLXj3uMJzNltNONW1D NxtPBwebCh245w2QUT403IVKTN7YUE3JSA== -----END CERTIFICATE-----Generated at Tue Apr 29 23:04:48 2025 by rpki-client